Cisco WS-C3560-48PS-S Software Configuration Manual page 9

Configuring 802.1X Port-Based Authentication
9
C H A P T E R
78-16156-01
Controlling Switch Access with RADIUS
Understanding RADIUS
RADIUS Operation
8-19
Configuring RADIUS
Default RADIUS Configuration
Identifying the RADIUS Server Host
Configuring RADIUS Login Authentication
Defining AAA Server Groups
Configuring RADIUS Authorization for User Privileged Access and Network Services
Starting RADIUS Accounting
Configuring Settings for All RADIUS Servers
Configuring the Switch to Use Vendor-Specific RADIUS Attributes
Configuring the Switch for Vendor-Proprietary RADIUS Server Communication
Displaying the RADIUS Configuration
Controlling Switch Access with Kerberos
Understanding Kerberos
Kerberos Operation
8-34
Authenticating to a Boundary Switch
Obtaining a TGT from a KDC
Authenticating to Network Services
Configuring Kerberos
Configuring the Switch for Local Authentication and Authorization
Configuring the Switch for Secure Shell
Understanding SSH
8-38
SSH Servers, Integrated Clients, and Supported Versions
Limitations
8-38
Configuring SSH
8-39
Configuration Guidelines
Setting Up the Switch to Run SSH
Configuring the SSH Server
Displaying the SSH Configuration and Status
Understanding 802.1X Port-Based Authentication
Device Roles
9-2
Authentication Initiation and Message Exchange
Ports in Authorized and Unauthorized States
Supported Topologies
Using 802.1X with Port Security
8-18
8-18
8-20
8-20
8-21
8-23
8-25
8-28
8-31
8-32
8-32
8-35
8-35
8-35
8-36
8-37
8-39
8-39
8-40
8-41
9-1
9-1
9-4
9-4
9-5
Catalyst 3560 Switch Software Configuration Guide
8-29
8-29
8-36
8-38
9-3
Contents
8-27
8-31
ix